Five Charged in “Russian Coms” Fraud Platform Case

A cluster of high-impact cyber incidents and vulnerabilities was reported: active exploitation of a maximum-severity Adobe ColdFusion flaw (CVSS 10.0), an open directory exposing three Evilginx phishing operators enabling MFA bypass, and a novel OAuth Client ID spoofing technique targeting Microsoft Entra ID that creates stealthy cloud access paths. State-linked activity and targeted espionage were highlighted (Russian actors scanning routers via weak SNMP credentials; Chinese and Indian espionage against a Pakistani police force), while ransomware/malware developments included new destructive